Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/yZYCtJIcaINWT0smUVwdY-TPNkQ.mft
File:                     yZYCtJIcaINWT0smUVwdY-TPNkQ.mft (raw, json)
Hash identifier:          pD/Auzl6LJCq3VFrzXu0Jp9SFvT4pAgoveR8GglLfAs=
Subject key identifier:   27:23:A1:0E:47:42:5C:CA:AD:2E:96:EE:43:CB:C9:DF:E1:A5:FC:8C
Authority key identifier: C9:96:02:B4:92:1C:68:83:56:4F:4B:26:51:5C:1D:63:E4:CF:36:44
Certificate issuer:       /CN=A91E4EF6/serialNumber=C99602B4921C6883564F4B26515C1D63E4CF3644
Certificate serial:       0A8D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZYCtJIcaINWT0smUVwdY-TPNkQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/yZYCtJIcaINWT0smUVwdY-TPNkQ.mft
Manifest number:          119A
Signing time:             Fri 22 Aug 2025 19:41:09 +0000
Manifest this update:     Fri 22 Aug 2025 19:41:09 +0000
Manifest next update:     Fri 29 Aug 2025 19:41:09 +0000
Files and hashes:         1: yZYCtJIcaINWT0smUVwdY-TPNkQ.crl (hash: HgMe2Bx9vcBBepJLRdlfcngP85cCeA+wNzazcwTEwXY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/yZYCtJIcaINWT0smUVwdY-TPNkQ.crl
                          rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/yZYCtJIcaINWT0smUVwdY-TPNkQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZYCtJIcaINWT0smUVwdY-TPNkQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 19:41:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2701 (0xa8d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E4EF6, serialNumber=C99602B4921C6883564F4B26515C1D63E4CF3644
        Validity
            Not Before: Aug 22 19:41:09 2025 GMT
            Not After : Aug 29 19:41:09 2025 GMT
        Subject: CN=68a8c7d5-c1fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:01:54:e3:a9:04:d8:69:4e:15:d5:ab:dd:f7:
                    46:29:f6:21:b5:ad:d2:1a:75:30:31:a2:55:68:84:
                    bc:f2:e6:1e:4a:03:72:46:b9:fc:97:21:60:e3:bb:
                    c6:d7:b1:f9:b2:fd:50:13:c1:25:71:f9:4b:49:95:
                    65:da:0a:d1:6c:34:2b:76:ce:25:9f:51:11:92:e0:
                    4d:5f:d9:ed:f3:98:ba:d6:86:a8:8d:b9:69:66:20:
                    5e:2b:58:16:fa:7a:6f:a9:ab:1b:9b:0d:d8:a1:ac:
                    52:d2:97:b4:5f:b9:15:55:d2:4b:2d:e0:90:37:67:
                    8b:24:b3:f5:ec:8f:74:f5:73:85:10:43:89:65:9f:
                    b8:9f:36:f3:a7:0c:9e:ab:cc:96:bb:94:b6:73:3c:
                    20:91:67:68:4c:66:6e:90:1a:05:2c:8e:ab:8d:e2:
                    0d:6a:b7:d7:7c:ee:de:d8:a7:2d:e9:89:b6:3e:b3:
                    7e:55:1c:7e:cf:19:7c:77:dd:25:34:b3:c1:25:99:
                    26:d6:8a:42:79:b6:69:52:bc:4b:6c:0e:ec:0a:48:
                    db:30:03:08:56:5b:d2:4d:7a:08:a7:ab:93:04:e0:
                    ae:66:74:64:db:38:96:90:48:9d:f5:4b:fc:93:9e:
                    53:6e:7f:38:a2:b4:d1:06:ea:e0:d2:17:68:ca:11:
                    45:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:23:A1:0E:47:42:5C:CA:AD:2E:96:EE:43:CB:C9:DF:E1:A5:FC:8C
            X509v3 Authority Key Identifier:
                keyid:C9:96:02:B4:92:1C:68:83:56:4F:4B:26:51:5C:1D:63:E4:CF:36:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/yZYCtJIcaINWT0smUVwdY-TPNkQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZYCtJIcaINWT0smUVwdY-TPNkQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/yZYCtJIcaINWT0smUVwdY-TPNkQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:a8:c6:d8:32:c7:b5:55:a0:50:6b:c4:84:ec:04:78:58:66:
         0d:2e:7d:3b:60:11:dd:b6:2a:a5:a7:3c:28:2c:0d:85:f4:2b:
         95:40:71:4c:62:2f:f7:ea:e0:b3:d9:9a:50:9f:4c:b2:24:8d:
         cb:cc:e9:b4:bc:40:a3:58:e0:3d:07:f5:b5:19:bc:7c:98:9d:
         83:c9:21:e4:79:29:47:54:92:c2:d1:7f:ce:72:4b:f1:3d:d8:
         e0:09:cb:89:ad:5a:3a:ba:23:5f:ff:fb:ea:86:ab:f0:6b:2d:
         99:52:63:f5:f1:9f:f8:f5:0d:94:51:0e:e3:58:fb:96:25:04:
         36:e1:c7:33:3f:cb:df:bf:32:7a:93:61:be:8a:46:76:0e:9d:
         e4:b6:16:07:7a:79:6a:35:f9:b0:3b:d1:3f:53:2a:c9:16:34:
         48:85:fb:a8:f4:fb:b0:df:c6:ca:34:13:f2:3d:c6:64:b6:a2:
         be:a0:59:1a:1d:f4:6d:cf:e1:5c:3f:88:48:71:5c:c1:72:22:
         f6:32:fe:52:fa:70:1e:23:bf:d2:1e:40:13:97:44:93:15:64:
         f3:34:03:c5:56:d2:ef:6f:fb:9b:d6:17:94:26:c0:0b:dc:eb:
         6c:9e:c5:17:8b:02:b1:de:7d:1e:27:b3:8a:d5:05:58:99:e2:
         83:32:8d:c5
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCo0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTRFRjYxMTAvBgNVBAUTKEM5OTYwMkI0OTIxQzY4ODM1NjRGNEIyNjUxNUMxRDYz
RTRDRjM2NDQwHhcNMjUwODIyMTk0MTA5WhcNMjUwODI5MTk0MTA5WjAYMRYwFAYD
VQQDEw02OGE4YzdkNS1jMWZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAywFU46kE2GlOFdWr3fdGKfYhta3SGnUwMaJVaIS88uYeSgNyRrn8lyFg47vG
17H5sv1QE8ElcflLSZVl2grRbDQrds4ln1ERkuBNX9nt85i61oaojblpZiBeK1gW
+npvqasbmw3YoaxS0pe0X7kVVdJLLeCQN2eLJLP17I909XOFEEOJZZ+4nzbzpwye
q8yWu5S2czwgkWdoTGZukBoFLI6rjeINarfXfO7e2Kct6Ym2PrN+VRx+zxl8d90l
NLPBJZkm1opCebZpUrxLbA7sCkjbMAMIVlvSTXoIp6uTBOCuZnRk2ziWkEid9Uv8
k55Tbn84orTRBurg0hdoyhFFqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCcjoQ5H
QlzKrS6W7kPLyd/hpfyMMB8GA1UdIwQYMBaAFMmWArSSHGiDVk9LJlFcHWPkzzZE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNEVGNi85MzgwMDc4RTYx
RDYxMUVBQjhEMDE1NUJDNEY5QUUwMi95WllDdEpJY2FJTldUMHNtVVZ3ZFktVFBO
a1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3laWUN0SkljYUlOV1Qwc21VVndkWS1UUE5rUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
NEVGNi85MzgwMDc4RTYxRDYxMUVBQjhEMDE1NUJDNEY5QUUwMi95WllDdEpJY2FJ
TldUMHNtVVZ3ZFktVFBOa1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBxqMbYMse1VaBQa8SE7AR4WGYNLn07YBHdtiqlpzwoLA2F9CuVQHFM
Yi/36uCz2ZpQn0yyJI3LzOm0vECjWOA9B/W1Gbx8mJ2DySHkeSlHVJLC0X/Ockvx
PdjgCcuJrVo6uiNf//vqhqvway2ZUmP18Z/49Q2UUQ7jWPuWJQQ24cczP8vfvzJ6
k2G+ikZ2Dp3kthYHenlqNfmwO9E/UyrJFjRIhfuo9Puw38bKNBPyPcZktqK+oFka
HfRtz+FcP4hIcVzBciL2Mv5S+nAeI7/SHkATl0STFWTzNAPFVtLvb/ub1heUJsAL
3OtsnsUXiwKx3n0eJ7OK1QVYmeKDMo3F
-----END CERTIFICATE-----
Generated at Sat Aug 23 20:25:30 2025 by rpki-client